This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36332e302f32342d3234203d3e20323134343332.roa File: 34352e36362e36332e302f32342d3234203d3e20323134343332.roa (raw, json) Hash identifier: wmPPJI/7JEF1H/CquPITiadzgzmoOhPgK2mmspIXims= Subject key identifier: CA:86:71:5F:19:61:D8:06:9D:D5:5E:2A:1A:1F:4E:8D:44:F8:89:B4 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 4EBB9BEF7FC369C638DB5B6E133F9440D860DE2D Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36332e302f32342d3234203d3e20323134343332.roa Signing time: Fri 19 Dec 2025 12:20:27 +0000 ROA not before: Fri 19 Dec 2025 12:15:27 +0000 ROA not after: Fri 18 Dec 2026 12:20:27 +0000 asID: 214432 IP address blocks: 45.66.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:bb:9b:ef:7f:c3:69:c6:38:db:5b:6e:13:3f:94:40:d8:60:de:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Dec 19 12:15:27 2025 GMT Not After : Dec 18 12:20:27 2026 GMT Subject: CN=CA86715F1961D8069DD55E2A1A1F4E8D44F889B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:4e:3b:1f:4c:1c:7b:27:ac:10:6e:f0:66: 94:a9:d8:48:d0:80:94:08:84:b8:a2:1f:83:0b:6f: 9a:c0:73:dc:1b:8d:6e:ae:56:54:20:2e:41:8f:c6: 16:e4:9b:de:f8:31:5e:72:5c:9f:f5:e6:bb:48:a0: 2a:08:06:3d:8f:cf:f1:2b:0f:bd:39:0d:40:58:44: 9c:d9:22:da:44:40:c7:ec:ba:7b:6b:21:60:17:15: 41:b8:27:6b:92:7d:41:6d:ca:c1:f1:ca:05:11:0a: f7:a8:61:5a:59:d5:df:21:ee:3c:a9:0b:dc:9e:f4: fb:bf:f0:bd:dd:9d:4d:95:70:80:0b:56:01:ca:00: 83:08:42:50:c4:40:61:bb:60:04:63:a2:65:fe:bf: f0:b5:c1:01:ed:eb:c0:18:65:f4:64:f2:dd:0f:23: 09:f1:8c:fa:c8:63:cf:1c:45:4c:36:d2:c5:cf:b8: cf:04:cf:69:36:40:7d:58:6b:96:04:e2:dd:90:8a: 6e:36:40:e0:69:09:03:48:a8:5f:6e:14:a0:a2:66: 2b:b1:8b:4f:20:05:9f:52:58:ef:27:93:db:69:b8: c5:d5:30:4d:2a:ac:27:04:b6:7b:ae:e4:cb:31:ce: e1:de:5b:a7:9f:5e:59:06:77:83:30:3a:b1:48:7d: b7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:86:71:5F:19:61:D8:06:9D:D5:5E:2A:1A:1F:4E:8D:44:F8:89:B4 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36332e302f32342d3234203d3e20323134343332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.63.0/24 Signature Algorithm: sha256WithRSAEncryption 30:39:b0:b7:a5:ba:b3:8b:d5:61:b5:de:77:fd:55:cd:d2:9f: 85:0c:44:5e:74:5b:66:a5:58:e5:21:db:b6:c3:41:0c:95:03: 24:d7:45:76:bb:12:79:58:43:9e:5f:02:d5:b5:5d:57:3d:7a: ec:7f:33:57:70:e0:ed:6b:2f:d2:9b:de:fd:9c:f1:56:94:43: b0:c8:ee:40:d0:87:81:c3:91:dd:ea:11:2e:85:e7:b8:d1:aa: 30:46:d9:92:fa:30:02:b0:0f:ea:e4:c2:a0:36:41:49:4c:53: 41:96:c8:e5:88:12:8a:5e:6f:7c:ce:4a:2d:43:3d:ac:1c:3e: d4:95:cf:65:f6:f6:7e:89:70:73:0f:ac:8b:3c:8d:5f:74:d7: f4:34:c9:80:20:b3:ad:b5:b6:9a:3d:03:64:98:af:2a:e1:4f: 93:ec:58:c0:bf:7d:fb:2a:33:43:5a:48:46:4a:bb:a1:71:8d: f8:46:e4:45:99:4e:11:0b:ba:a8:f7:fa:5d:61:fd:6e:22:3b: 79:a3:f8:50:fd:01:45:62:c1:0e:99:86:bf:69:3c:f1:01:fd: 86:c9:55:a5:2f:9e:f7:31:5e:65:03:c8:e3:66:bc:f9:d6:f0: f6:86:bc:8c:fe:48:f0:dc:f8:a4:30:70:97:32:e6:29:d2:27: 3d:b9:b6:3f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUTrub73/DacY421tuEz+UQNhg3i0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTEyMTkxMjE1MjdaFw0yNjEyMTgxMjIwMjdaMDMxMTAvBgNV BAMTKENBODY3MTVGMTk2MUQ4MDY5REQ1NUUyQTFBMUY0RThENDRGODg5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq4E47H0wceyesEG7wZpSp2EjQ gJQIhLiiH4MLb5rAc9wbjW6uVlQgLkGPxhbkm974MV5yXJ/15rtIoCoIBj2Pz/Er D705DUBYRJzZItpEQMfsuntrIWAXFUG4J2uSfUFtysHxygURCveoYVpZ1d8h7jyp C9ye9Pu/8L3dnU2VcIALVgHKAIMIQlDEQGG7YARjomX+v/C1wQHt68AYZfRk8t0P IwnxjPrIY88cRUw20sXPuM8Ez2k2QH1Ya5YE4t2Qim42QOBpCQNIqF9uFKCiZiux i08gBZ9SWO8nk9tpuMXVME0qrCcEtnuu5MsxzuHeW6efXlkGd4MwOrFIfbcFAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUyoZxXxlh2Aad1V4qGh9OjUT4ibQwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgxYjdmMDgt ZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvMzQzNTJlMzYzNjJlMzYzMzJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM0MzMzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1C PzANBgkqhkiG9w0BAQsFAAOCAQEAMDmwt6W6s4vVYbXed/1VzdKfhQxEXnRbZqVY 5SHbtsNBDJUDJNdFdrsSeVhDnl8C1bVdVz167H8zV3Dg7Wsv0pve/ZzxVpRDsMju QNCHgcOR3eoRLoXnuNGqMEbZkvowArAP6uTCoDZBSUxTQZbI5YgSil5vfM5KLUM9 rBw+1JXPZfb2folwcw+sizyNX3TX9DTJgCCzrbW2mj0DZJivKuFPk+xYwL99+yoz Q1pIRkq7oXGN+EbkRZlOEQu6qPf6XWH9biI7eaP4UP0BRWLBDpmGv2k88QH9hslV pS+e9zFeZQPI42a8+dbw9oa8jP5I8Nz4pDBwlzLmKdInPbm2Pw== -----END CERTIFICATE-----Generated at Fri Dec 19 18:43:47 2025 by rpki-client